This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Plan, lead, and execute risk‑based IT audits and advisory reviews covering technology processes, systems, and operations across a global, software‑centric organization
Evaluate the design and operating effectiveness of IT and information security controls, with emphasis on cloud infrastructure, data platforms, SaaS applications, and enterprise technologies
Develop clear, well‑structured audit programs, workpapers, and supporting documentation in accordance with IIA standards
Assess compliance with relevant information security, regulatory, and industry standards, including but not limited to PCI‑DSS, ISO 27001/27002, NIST, FedRAMP, and other applicable requirements
Apply established risk frameworks (e.g., NIST Risk Management Framework) to identify control gaps, assess residual risk, and evaluate mitigation strategies
Assess whether security and technology controls adequately safeguard data, including customer, confidential, and personal information
Prepare concise, high‑quality audit reports that clearly articulate observations, root causes, risk implications, and recommendations
Act as a trusted advisor by providing insights on control design, process improvements, and emerging technology risks
Demonstrate strong communication and influencing skills when presenting findings, facilitating discussions, and driving alignment on remediation
Requirements
3+ years of experience in IT audit, information security, risk management, or internal/external audit
Bachelor's degree in Computer Science, Information Technology, Information/Cyber Security, or a related business discipline from an accredited institution
Working knowledge of IT risk and control frameworks (e.g., NIST RMF, NIST CSF, CIS Critical Security Controls)
Strong understanding of cloud computing architectures and related security and governance controls
Knowledge of internal audit standards and practices (Institute of Internal Auditors)
Experience performing risk assessments, audit planning, control testing, and issue validation
Familiarity with global data protection and privacy regulations (e.g., GDPR, CCPA)
General understanding of enterprise technologies, including operating systems, databases, networks, and applications
Ability to collaborate effectively with stakeholders across geographies and disciplines
Fluency in English (reading, writing, and speaking)
Willingness and ability to travel up to 10% annually, including internationally
Strong interpersonal presence with the ability to build credibility and effective working relationships across technical and non‑technical teams
Clear, professional written and verbal communication
able to tailor messaging to different audiences
Analytical mindset with sound judgment and attention to detail
Comfortable operating in a dynamic, fast‑paced technology environment with changing priorities
Ability to independently manage multiple workstreams while maintaining quality and timelines
Nice to have
Professional certification such as CIA, CISA, CISM, CISSP, or similar
Experience auditing cloud‑native, SaaS, or data analytics platforms in a large‑scale enterprise environment
Prior experience in a software or technology‑focused company with global operations